Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa
File:                     5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa (raw, json)
Hash identifier:          T5jj03/2hrdDqGKFIPeQjtwLVfuuulAeWrXBkyh2QIE=
Subject key identifier:   B4:D8:ED:84:B8:79:26:30:65:9B:8E:A7:DA:CF:13:19:03:32:CA:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A23B4FEAD0454CA48159C4FF1BA25E2FF798EB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa
Signing time:             Wed 13 Aug 2025 00:51:11 +0000
ROA not before:           Wed 13 Aug 2025 00:51:11 +0000
ROA not after:            Wed 17 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:23:b4:fe:ad:04:54:ca:48:15:9c:4f:f1:ba:25:e2:ff:79:8e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 13 00:51:11 2025 GMT
            Not After : Sep 17 23:59:59 2025 GMT
        Subject: serialNumber=e3f68368c811bf41a2f0d9bc9f58677275c6db106ad2e7673b58c839760fa04f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:be:01:25:b8:b8:93:0d:66:4c:19:f5:72:cf:
                    88:63:40:85:b6:30:0c:42:b8:61:db:d5:14:4a:4b:
                    10:ab:1e:d4:ea:5d:eb:56:03:80:86:66:04:67:cc:
                    ae:c5:50:87:6a:81:13:f4:67:41:fb:36:fa:8f:5b:
                    ca:d5:ff:8f:33:b5:57:ec:87:8c:18:de:33:25:3f:
                    d3:ab:c3:9f:92:ef:c8:d2:e1:3f:02:32:c3:e3:ee:
                    9d:bc:af:33:70:d2:e9:c5:da:e1:9d:9e:4b:1e:1a:
                    e7:e2:11:0c:73:9e:8b:31:9e:70:ff:ec:a5:ab:b7:
                    2c:6b:da:5e:1b:a2:dd:70:e7:24:00:9b:4f:e1:4b:
                    f6:08:c3:ec:64:1a:f2:3b:31:bb:ca:26:e3:a0:1b:
                    f6:e9:14:a5:8e:59:58:c4:96:0e:3b:b4:de:86:a7:
                    16:dc:24:de:0d:02:4a:5e:93:83:a5:d9:3a:7e:64:
                    6a:a5:ab:ad:e3:ad:18:08:5c:17:a7:36:49:4d:d6:
                    9d:db:3c:3d:4d:d4:fa:d9:b2:ee:b4:60:5e:63:93:
                    12:2c:31:ad:ef:da:db:64:0f:2b:b3:6a:4a:d5:f9:
                    87:ab:f4:10:81:44:cd:3d:30:21:12:c0:d3:8d:95:
                    d9:e6:72:10:53:61:29:78:ea:b9:e5:16:1f:41:c7:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D8:ED:84:B8:79:26:30:65:9B:8E:A7:DA:CF:13:19:03:32:CA:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:1b:42:6f:9d:72:b0:3b:2b:1e:44:e0:4f:63:b2:0f:ce:ad:
         3f:7e:7e:41:2f:19:c1:28:9b:53:a9:87:43:01:2c:8d:2e:89:
         cc:79:8a:9b:15:49:4b:8c:a8:0f:50:51:b4:fc:e6:a7:2d:13:
         8c:98:17:91:a8:f6:99:97:26:51:bb:d7:76:7e:13:28:9d:45:
         76:ab:cf:b0:bf:bd:e0:ec:bb:1e:e7:26:14:55:c6:5e:35:9a:
         24:93:32:db:76:31:51:3e:f0:2f:50:79:8a:25:91:c8:69:95:
         3e:6e:51:2e:06:de:9d:db:b6:e3:91:7d:82:52:44:75:c4:e3:
         84:07:64:b5:16:7b:90:2c:1a:b0:0c:47:9e:cc:62:d2:3b:14:
         93:d7:b1:fb:86:32:2e:6e:59:ce:50:fc:14:25:cf:c6:2d:c0:
         a7:d0:29:11:77:23:28:c3:91:af:45:1f:55:7e:83:7d:47:04:
         af:0a:5f:74:d7:c5:44:eb:05:77:54:84:07:56:ef:32:e3:6a:
         89:99:89:4c:f2:3a:43:bd:ed:14:bc:4f:09:24:c6:82:f7:56:
         58:2c:7c:6a:9f:48:ad:5c:73:96:b7:90:a2:a7:fa:11:60:57:
         1d:1d:f9:02:a8:e8:f8:80:ff:fc:40:9d:03:84:f0:97:5c:a3:
         be:ac:da:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:09:41 2025 by rpki-client